Malware Analysis Report

2025-01-19 06:25

Sample ID 231220-apavcsbgel
Target 73ed4be1095da4d2fc6d7e83e3dda77f064284126cabf56d611cd6df58728f90
SHA256 73ed4be1095da4d2fc6d7e83e3dda77f064284126cabf56d611cd6df58728f90
Tags
irata
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral3

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

73ed4be1095da4d2fc6d7e83e3dda77f064284126cabf56d611cd6df58728f90

Threat Level: Known bad

The file 73ed4be1095da4d2fc6d7e83e3dda77f064284126cabf56d611cd6df58728f90 was found to be: Known bad.

Malicious Activity Summary

irata

Irata family

Irata payload

Reads information about phone network operator.

Requests dangerous framework permissions

Acquires the wake lock

MITRE ATT&CK

N/A

Analysis: static1

Detonation Overview

Reported

2023-12-20 00:22

Signatures

Irata family

irata

Irata payload

Description Indicator Process Target
N/A N/A N/A N/A
N/A N/A N/A N/A

Requests dangerous framework permissions

Description Indicator Process Target
Allows an application to read SMS messages. android.permission.READ_SMS N/A N/A
Allows an application to send SMS messages. android.permission.SEND_SMS N/A N/A
Allows an application to receive SMS messages. android.permission.RECEIVE_SMS N/A N/A
Allows an application to read the user's contacts data. android.permission.READ_CONTACTS N/A N/A

Analysis: behavioral3

Detonation Overview

Submitted

2023-12-20 00:22

Reported

2023-12-20 13:20

Platform

android-x64-arm64-20231215-en

Max time kernel

2271212s

Max time network

132s

Command Line

com.hogu3

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Reads information about phone network operator.

Processes

com.hogu3

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
GB 142.250.200.42:443 udp
GB 172.217.169.78:443 udp
FR 216.58.201.106:443 tcp
FR 216.58.201.106:443 tcp
GB 172.217.16.238:443 tcp
GB 172.217.16.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
FR 216.58.204.78:443 android.apis.google.com tcp
US 1.1.1.1:53 google.com udp
US 1.1.1.1:53 ssl.google-analytics.com udp
FR 216.58.204.72:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 206.212.58.216.in-addr.arpa udp
US 1.1.1.1:53 sh-k-rem.tk udp
GB 142.250.179.228:443 tcp
GB 142.250.179.228:443 tcp

Files

/data/user/0/com.hogu3/files/PersistedInstallation1921029313885299156tmp

MD5 3ce88993227b8d28db0b2916318a87f7
SHA1 7d425437611dc369b94bb4f3a42ce8bcc124728a
SHA256 1809c7737d4e764d073653618dde0f7e7b914ae6ab8ee4df91501e56ee5a3303
SHA512 f895d1262b2e199965643211b9bbfdf3ddbc0056e44bc4980457e9b5380e4c3ee3cd9caa0a0df2b6c073cbc6b677e5c5c7826355d8cacbb948eb8ed24eca4c5d

/data/user/0/com.hogu3/databases/google_app_measurement_local.db-journal

MD5 073021843bac5e4268ed09d09e606aea
SHA1 4cd21857b279deda9d8719768503b91b9d4cf097
SHA256 0819bae87dfe2b13fe1d86085c773144e622aa5d1a179ec42a765e4126988c9c
SHA512 8515ea63a340d1c18c850336d9c160dfc9c5b8828d7e609d434a4b0f0cae18a6f64647c3b56b9ae445f74ddf34fb4bdbee9bea1c3851ae223ed688ff9b347750

/data/user/0/com.hogu3/databases/google_app_measurement_local.db

MD5 d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA1 07ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512 442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

/data/user/0/com.hogu3/databases/google_app_measurement_local.db-journal

MD5 d5f61085a8fef19219426bb303daa4eb
SHA1 71904f7a20a4a71a4fa7ec8f62ce7125647c521d
SHA256 57820920ca8e88018b6559f54612deec74e2c72679792687a7e7d6c94960eb7b
SHA512 1beb0d212a69209ed7522644a9e8e7870cd487e797caa959199df73b91f0ec3d8c2089e6d131b6b9e888b939a552c813ae5eb43597e60c5d5cf8538a7369217d

/data/user/0/com.hogu3/databases/google_app_measurement_local.db-journal

MD5 563d952c6cc9dd8ea2279b46f8a0b41c
SHA1 3268724e8058699ea496788bc3e1c022005373fc
SHA256 b435d73b3bcdcac7c1ba6fc2980c230ef16ac938e1bfd2890a6450775d45f8f7
SHA512 b3e0eed59d075fbb99f5c32f17846d12bb9f16aab5e1c15ee8e9cb4ac9edc61242adf09356153ccc93940354f617c78fb7e935f5feac76e8f7f4c045d964fe36

/data/user/0/com.hogu3/databases/google_app_measurement_local.db-journal

MD5 f817092bbe526b05f58949cc367eed2c
SHA1 ce0e8ceee9c05bd635b0372bc1b3b2c63102e6b7
SHA256 b61b1b37b5766e15c1b1f0b4543ae55c40fc8ce62f2a10da9ab32d103f7bfb66
SHA512 1bfa8955aeaf7316d9362d438b6203a52bdcc5eba89831e725e9fcd86243d28d8b1647f9b008d8693993e2c7eae4de3ae77ddd1c19102bb7c03ce913980907a7

/data/user/0/com.hogu3/files/PersistedInstallation4978481508014204057tmp

MD5 de4c3eeff90a39ca29ccab8777ed9ec7
SHA1 dec430f64e337ad6e6af69d6148ce0398ab4e011
SHA256 af338cad13f912e4610cb1b08895862f8b3a4054367a445b6b5baad472cb52bd
SHA512 588217e7b8f74dde351e28a1fc722ebcf471b3cd763ff09de46071ec4d9bc5a659b8e85d6473c20470c342aa76e346cf6bdfabe5e55ab7818983820e4bf44525

/data/user/0/com.hogu3/databases/google_app_measurement_local.db-journal

MD5 30afd6b1daf53441739e9f95c89fce80
SHA1 795a48cc556621e9d5807a1d4dd6b8bc2975156a
SHA256 7a20c33701843e4f33ebef915c037f9ad510de36598d2d5663c410184cb75b79
SHA512 b8776925b610f68a236afecd1401b0499095359dcfb72a778bfb10da299d01875fe5c35171456cea70bc4484c78518d6d75aa9abf21783e1598f63aec9055475

/data/user/0/com.hogu3/databases/google_app_measurement_local.db-journal

MD5 9fe6c958c0bc8a5aabc46e12e3d2fc3d
SHA1 304f506cc426edb6c6c8243126d4739bfcb60a8f
SHA256 84cf590c05754357d36257b469ff00a4106024f7c13fb375db224d0e684c8ec9
SHA512 a8e2e3dc86502a824061674c01aa108fb406be0e76d4158695366d180a188feac063a9710e5a62a290196725733ac59f9e89f8ef47e68abcf742a3d694c4e69d

/data/user/0/com.hogu3/databases/google_app_measurement_local.db

MD5 3a6a4817207479fb51beb76448ea9e6e
SHA1 b68f6a8fbf95fb222e683d1edffe58c78828dd7a
SHA256 7c6dda3742e46781b0e989b3ac5b2edd562fa8e949ce213ae3cbef83823ade64
SHA512 2002d9ba2d3bfb726d2e0c2304e45a3e80507c4194ed8a5c86126b0635569fa7e44e60e04a4638259e59e0f31e5efe398874a0664cd3be31644dfad4e82e1baf

/data/user/0/com.hogu3/databases/google_app_measurement_local.db

MD5 2bd373a00ed774dedbde66b15333bf78
SHA1 428e9de8767d351116446cf9c8d6a5411f623d10
SHA256 4b1383cc42d88bee3b36391358d77c65ecf734f38b8f7e7ae102a67c6694baef
SHA512 936786b3b2b9901e369111ce72628e55e4d64038582d0abf2b2cbf14cf431b6fa091dea0a443824a6ede2397f22eff5108475c6aa12e373ef01666785203a6aa

/data/user/0/com.hogu3/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/user/0/com.hogu3/databases/google_app_measurement_local.db

MD5 7565b401f00f5d1e7b2a3f694bbe4237
SHA1 46ca71475e071130e95938fadfeadcb810f781c3
SHA256 eaebe1a77f5e253c29f3374d9d1887a42539eb4adeb505da2940a1630123a888
SHA512 eeb02c1792d22ea1c796d1752a6315a37e38cf4b25a6e83d707bebce790c358d457fed80e654c2d30008225403db43d1c19a72615e0fbc06062478452b8a5fea

/data/user/0/com.hogu3/databases/google_app_measurement_local.db

MD5 de82e2c94d2718988804b035a46d17b1
SHA1 705f5ff19093ad209f2a666085d6ccaed3bf58a4
SHA256 29110e626f8f49171d14a819b34492d094120f21ed7a963007fe95439d771d39
SHA512 68f5f88e638e76cb5036dad6b320896f1735f64067ace152e0baea81e9ea0d153559f53bd5c608b397281369dafd14c5f5965f92f567dc89db157414a699023e

Analysis: behavioral1

Detonation Overview

Submitted

2023-12-20 00:22

Reported

2023-12-20 17:12

Platform

android-x86-arm-20231215-en

Max time kernel

2285139s

Max time network

130s

Command Line

com.hogu3

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Processes

com.hogu3

ping -c 2 -W 10 -v google.com

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 google.com udp
US 1.1.1.1:53 14.200.250.142.in-addr.arpa udp
GB 142.250.200.46:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
US 1.1.1.1:53 sh-k-rem.tk udp
GB 142.250.200.14:443 android.apis.google.com tcp

Files

/data/data/com.hogu3/files/PersistedInstallation5931926550381206674tmp

MD5 6b9b766de85e8024f06853671133981d
SHA1 cd8fb487d89a0b9298bfad8664751a630782661f
SHA256 223f5ddbc7d3dcc87eacd802257902df02ef780c827f68de553a7c953e2bafb0
SHA512 1c71293757b05db90ad2e9741036c812d9c02dba186b80b2157ca424fcf3344d625c2ccd0f019baff9ea09eb3962d1afb7ca8f3fd30780c8e0d921ecaba7cc80

/data/data/com.hogu3/databases/google_app_measurement_local.db-journal

MD5 99780c6b46dc4d4862282596873badb7
SHA1 c91cf3e1cbf277b0e026eb56d5ac8bb386a3b5c0
SHA256 062ca9355be4cecf23791f0ec5a9a613dc3d11f8433b9f2b1f6406c782f8ff5e
SHA512 29f1e306266bf2f8ba00adc2f2653e622d3ca9456586b5b8b4e7fd32138ee4cbec2b4933d673f1fcda14aec9691ef01eb599537d5048cd8dd95596df3812d02c

/data/data/com.hogu3/databases/google_app_measurement_local.db

MD5 7237409e0640cfab7bdbd429bf821a3b
SHA1 4c3da934842f8d4835dfe2a9c275a300e5123309
SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512 c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

/data/data/com.hogu3/databases/google_app_measurement_local.db-shm

MD5 cf845a781c107ec1346e849c9dd1b7e8
SHA1 b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA512 4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

/data/data/com.hogu3/databases/google_app_measurement_local.db-wal

MD5 be1aec3db8bcd25f793806b64e925da1
SHA1 faadef61ae30d05e66e5a825354fc4ee9223ce1b
SHA256 3e8439dfcead8e799c72674f9f01875c5ca0db9fd536a83eb192253800a2d909
SHA512 142533394d28af8b78d2f17018eba4df16952e4ee880955ccf28571aa7a601693246cf528311b467d267e939c102badb7c189fa678c51c4440a3f15389e8fb58

/data/data/com.hogu3/files/PersistedInstallation8867271336282070422tmp

MD5 4bf409d8c4eff396478008781405dd27
SHA1 db7d1656a1a61f4f79e1c04d867b4b98be0986ee
SHA256 fe3d54314e34219c50500135b66271dc733a656c4d209f9da5ba5abaadcf5712
SHA512 6ae4ebb4ce1d210e348f6aa1749d2d99025a5cc0182f2809554c1280662eb40e7cb91a0f703df9ff7958b07919dfee2d3822d6c8e7ae71ff4497815da7e18775

/data/data/com.hogu3/databases/google_app_measurement_local.db-wal

MD5 c2f468a80f9bf8c7a3c6524093025a6f
SHA1 6835d2dee068e2041f8bbe7e3827565645147d8e
SHA256 f6c229eb85fedc087b0e1f1aba7470b02005554eb26f613a102ee520756370cc
SHA512 545ea7d8bde77a8c8f1734ff228cbad5b24feafc1286ebfad829beb587de6ea8c14538115d9fcfa36df98760612a690121e661c9fd5e9eed6baacbba014829ce

/data/data/com.hogu3/databases/google_app_measurement_local.db

MD5 74c598637636dcbe58f0416003379eee
SHA1 d9945845f770e915e007ccb34aa9da7854e45bc4
SHA256 81aefe2d1d31514f8de8f8aa9e3089113ed5fb37035c1246c9282a34520e4258
SHA512 95fb22523a6ec8782ceb1849978e7d5653eb591941fbb36de88bdfe1ce75ee340ae0cab14fc18f5b5ec5c8a21503b14e377e0a6c121a60ba894d04b34a81c51a

/data/data/com.hogu3/databases/google_app_measurement_local.db-wal

MD5 456b58c1c354d01577eb5f3c5c9c3296
SHA1 b5b514a409499d9b699dcd0ad2bf81b82a18a516
SHA256 283f56c7333c2f5a2097686ab266f09247d389d7a99dca237c257b768e02b7d7
SHA512 60f3d80cd6e249f01cd3247e994332f44ecb63b578ba78ac0d699897b8d8f26cbdb50ac244a5dc754b88e70812a24fee22cd9ab8be31206df2370afafc135fbf

/data/data/com.hogu3/databases/google_app_measurement_local.db

MD5 9995f33300f601286caeb10b24f244f8
SHA1 635817d74a25933a11dde8750817229957c23913
SHA256 1b6ad24cc9e45e7345241bbffb46731e8baf48017747baca4da5a9205172773c
SHA512 48810d7cd3867a33e8f55a022ef5dd782f2db8f504cf5bd97a7f2c2d47fa68eba944d686db27676ec9e4b5f973c75623b1f198b3fe05218d53e5ae43b53c7c0f

/data/data/com.hogu3/databases/google_app_measurement_local.db-wal

MD5 664d9ec5f6e358363cab687e554d2f9f
SHA1 83693082c4a4f3f7fc237bbce6a335d7376177d8
SHA256 9cfc6225b198db45ae2bdcefa7bdcb19a1f9bf1c617f1a844ec745a3e2a1165d
SHA512 47e80fa5e1cb90d72b902095059bc607a8d247c53557d5cb1d2e72129b46dc75147250d136d5c1fc64487100d026627b91d1e6e6e7fb85838fe861e28a054193

/data/data/com.hogu3/databases/google_app_measurement_local.db

MD5 2778ce61ed3c7a80bcfab3b76416e4ad
SHA1 179e134134ec6fc83d9018c80007f4f543c8c22b
SHA256 fe4ecf8f96baa9c142b318d59bebbbb169fa6e030dea0177678b92cf289a72ca
SHA512 c11c0663fcf12fab2483a2b8574591c3a28d0cc02e2f6a4e8d3a0535fccd50ce53e671720e300af9de6687732e52ce633fe83dbf2b241eb3a9329a5f22a33be1

/data/data/com.hogu3/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/data/com.hogu3/databases/google_app_measurement_local.db-wal

MD5 68bdb97b971b427f1bd24c6f53029b89
SHA1 3c9088ccd720e9707bec2a62150c8faee9835a64
SHA256 fa017bf4a7fd457dd02a98d3c337b90a934acb2e866a1c0849fbad6fa24a6abd
SHA512 d5487c9f8ef1d222a86cc85be4324215698d3d6d9524fe9b61d62d10c052cb6947d99b6f143c3b394c7ebfec224ad6baf308b56a0139e889b8952ab65c3f7f93

/data/data/com.hogu3/databases/google_app_measurement_local.db

MD5 c52043719898478b463baa412de291c0
SHA1 4048f92f81b1d4f4dcec7c9cd270b57d0fc1bc4f
SHA256 24eae60f2bca17e7199a2e2ebaee970c3eac03cfe120249a2f5636ae74a6eb50
SHA512 cd03788658a52707e16e8af31259a5d75fd538d5ee055c96cf62bbfac857632610c76209691fe1d5e94231968a72ae3bb4ea30b6e92fb711e5720c8363e649a0

Analysis: behavioral2

Detonation Overview

Submitted

2023-12-20 00:22

Reported

2023-12-20 13:20

Platform

android-x64-20231215-en

Max time kernel

2271204s

Max time network

152s

Command Line

com.hogu3

Signatures

Acquires the wake lock

Description Indicator Process Target
Framework service call android.os.IPowerManager.acquireWakeLock N/A N/A

Reads information about phone network operator.

Processes

com.hogu3

Network

Country Destination Domain Proto
N/A 224.0.0.251:5353 udp
US 1.1.1.1:53 ssl.google-analytics.com udp
GB 142.250.187.232:443 ssl.google-analytics.com tcp
US 1.1.1.1:53 google.com udp
US 1.1.1.1:53 206.212.58.216.in-addr.arpa udp
GB 172.217.16.238:443 tcp
US 1.1.1.1:53 android.apis.google.com udp
US 1.1.1.1:53 sh-k-rem.tk udp
GB 172.217.16.238:443 android.apis.google.com tcp
GB 216.58.213.4:443 tcp
GB 216.58.213.4:443 tcp
GB 172.217.169.46:443 tcp
GB 172.217.16.226:443 tcp

Files

/data/data/com.hogu3/files/PersistedInstallation1202132988423682696tmp

MD5 779097076357209115e1e24484a305a0
SHA1 96d738d3db59baf850cd82761a10477ae8dc578b
SHA256 8fde0db4dca19b6bf3b1badc69dc1f408d56724e7c069bd4068a434f9e0ab55d
SHA512 838b1764a5b845c1278e29227b472db53f4e39019673278b9e8084a294bba7035d57a1b68f242e4784cc574683799fb9eca31df7d2ee41823d6417b094f4f20f

/data/data/com.hogu3/databases/google_app_measurement_local.db-journal

MD5 180a4a9737f63295f8bff33dd6bf2e2a
SHA1 29312804b8aedcf9aa30484a091823971aa4af65
SHA256 bf0a2412ce19c32a00075f300f06631ea311bb35f3cdd49a08f0aaa40638b38d
SHA512 994f4b1eb9649ef37b88b2f83d8734012e6a5d5c4716a5951e2188b569886a38de76b3c546ae0fe79c500b8407979808914d2623d50f482d72ee5de2dcfa8a19

/data/data/com.hogu3/databases/google_app_measurement_local.db

MD5 eb52a90bb70b76e946b62f50b6f7fb85
SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

/data/data/com.hogu3/databases/google_app_measurement_local.db-journal

MD5 558dbe41c06c2e642a4fc59dc21ab7b2
SHA1 145b11bff064c663ca46ae3f3035ee9548e7692e
SHA256 5009de97025442b5985c16cf7d4de6ce17bbe485148e9bb8121881731d22801c
SHA512 bab00a191f581e56d921c243537845d17b1528084d64f7ef7fb0df53bcdb2f76177841f03f4aebc5b68e8e98b8628295e51cbf85de93c17abe9cd0c1b234bd79

/data/data/com.hogu3/databases/google_app_measurement_local.db-journal

MD5 c99627b9fbc111d9465afa76802c046c
SHA1 ab2eaa081f21d67c7822b0f2ee6c0e17cad7baba
SHA256 15373d969fac16c6c4356923150e9e8db245ac0619579464c1060da41516d99a
SHA512 2a6176c4186991c3e3c4d9c3c2d0751a7504724e4c49b9b0859f2f991cccae559fd0d86145d0572157ac057084db61032a83b40f929127a1e2c1dffaa74d630c

/data/data/com.hogu3/databases/google_app_measurement_local.db-journal

MD5 2e13db0b9753011ad41865b7b58aea95
SHA1 d772cf49012869e7780124faec9c651e207c29b1
SHA256 dd644347c474292fd4e47ebd932ee2570d476858674162255c7261c976ab5a77
SHA512 a252efe9c130d51a031c8310fceb3eb762801d4c47999816098c366c60404920ca567bfd36599639f243c52731ac3e45685e190d9cda180961f5739770e24405

/data/data/com.hogu3/files/PersistedInstallation2622523571168053545tmp

MD5 b28d301dded2918988ab902535a1e6b7
SHA1 ea2a8e057c0f35e40a6f2827b4bfe41343c61144
SHA256 f2a1928bbcb656c9630c4e41aa2563f18e0a52172867d1cf608c57263631d81d
SHA512 f182660c63a4a1887ec0ff7f4e61106819f2d15da67ef8cabc713dd7554b3056796ac7edf0a6a01f544c1db5d1393819c56bb85df288c1898c260a6428525a98

/data/data/com.hogu3/databases/google_app_measurement_local.db-journal

MD5 9332ca157fc5b8ebc964cd22043e18ef
SHA1 d02849b5508a53ff6fdb32cb2bb1a3cb55ecf1f4
SHA256 47dcdb9b11b5ca617d0fb84561b9c01fe80cecf17f42893650bf82b20e01d022
SHA512 2687c7e1e53d420e8556eecf6079d8d0e33fff5f32fc3644264ec550285849369099e3adac93833859c30dab6f99229a74205252209bd67460802668eb815b71

/data/data/com.hogu3/databases/google_app_measurement_local.db-journal

MD5 4764c5bbfd8c5e9252c7b0c8b844c956
SHA1 d19bcbe997d0b5c45afdc4b99ff61b40241c99c0
SHA256 53597524c5b529d6b57631cde7f894e621c6b5da5cd2223554ed017c20562a42
SHA512 588d73e56718fff23adaeaf466e8b21dfccee64a1022bc3c72ec675a051920240fc3b1095a78b8ecb9fb9d371acc6f4cf8d89caa6103ed539d9c1f2dafaf04e4

/data/data/com.hogu3/databases/google_app_measurement_local.db

MD5 0033cbb7e5ddfb4bd99f670d10d8216a
SHA1 2216edd7dbff1a9702e4eca4ed5c7c8283a8ceef
SHA256 2c0a035868bae7bcac6a499514fbf8516f427b8a63475f72d0278f5fd2bbbee3
SHA512 caba25303db5a73bbb8848c9dc0a70b79c74666ab95a316cf312561d228010059dc72384f279a9548c5ac95ba676f27db4b79541dc9a36f04d2c664b0fdffa9e

/data/data/com.hogu3/databases/google_app_measurement_local.db

MD5 ee6fc78017a9fac91e0ce16289b04a58
SHA1 1333350261ccd3212d29d57e95e5c790273ab735
SHA256 6089ec075c8f4ab492298613321fba9a9ae6133c0a3ede17f809b746a99a6246
SHA512 a3a52335a1bffb60af43382653a92b1d929aea0b671c6006dcbd3d2bd599281fcad6e507e37c3a8eaa1fe1f4223682a20191d9921850711971c1fc76bf3983c3

/data/data/com.hogu3/databases/google_app_measurement_local.db

MD5 ec7389ad01201a0c434c46623e777af5
SHA1 65a19ceaf3f4036f7392257f73de19f25bbf8998
SHA256 fc3ee1cea7d81ee1be12e26148224835ed6a58608c885e04b6520be927cb1d8a
SHA512 44fa03ef74c0c221130a2f28f28343d78af6ecb15cbb3884afe4ad4e8374c078f9c92fcc9bafaaf2d4c08651ce262c766ab945fc41a155724ec4dfdced59374d

/data/data/com.hogu3/cache/~test.test

MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

/data/data/com.hogu3/databases/google_app_measurement_local.db

MD5 01bcc81b64efbdb7f1e7180da8df0951
SHA1 6e18705d0e3782b18717ff4dd56c16f0d4f6c868
SHA256 0bb8c4faa0e4d447df57c400c561b3f8a171882161a138ab1b0290f41204df80
SHA512 2d05ed2d4f6b0eee0167040431a8ca478a037d35af3369439cab58beba0f3b0c59451a1331244178c7851c6a9fd9987d38dffcc1bc6a0623baa0ab6a2f2b602e